xref: /illumos-gate/usr/src/lib/krb5/plugins/preauth/pkinit/pkinit_profile.c (revision 159d09a2)

/*
 * COPYRIGHT (C) 2006,2007
 * THE REGENTS OF THE UNIVERSITY OF MICHIGAN
 * ALL RIGHTS RESERVED
 *
 * Permission is granted to use, copy, create derivative works
 * and redistribute this software and such derivative works
 * for any purpose, so long as the name of The University of
 * Michigan is not used in any advertising or publicity
 * pertaining to the use of distribution of this software
 * without specific, written prior authorization.  If the
 * above copyright notice or any other identification of the
 * University of Michigan is included in any copy of any
 * portion of this software, then the disclaimer below must
 * also be included.
 *
 * THIS SOFTWARE IS PROVIDED AS IS, WITHOUT REPRESENTATION
 * FROM THE UNIVERSITY OF MICHIGAN AS TO ITS FITNESS FOR ANY
 * PURPOSE, AND WITHOUT WARRANTY BY THE UNIVERSITY OF
 * MICHIGAN OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING
 * WITHOUT LIMITATION THE IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE
 * REGENTS OF THE UNIVERSITY OF MICHIGAN SHALL NOT BE LIABLE
 * FOR ANY DAMAGES, INCLUDING SPECIAL, INDIRECT, INCIDENTAL, OR
 * CONSEQUENTIAL DAMAGES, WITH RESPECT TO ANY CLAIM ARISING
 * OUT OF OR IN CONNECTION WITH THE USE OF THE SOFTWARE, EVEN
 * IF IT HAS BEEN OR IS HEREAFTER ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGES.
 */

#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>

#include "k5-int.h"
#include "pkinit.h"

/*
 * Routines for handling profile [config file] options
 */

/* Forward prototypes */
static int _krb5_conf_boolean(const char *s);

/*
 * XXX
 * The following is duplicated verbatim from src/lib/krb5/krb/get_in_tkt.c,
 * which is duplicated from somewhere else. :-/
 * XXX
 */
static const char *const conf_yes[] = {
    "y", "yes", "true", "t", "1", "on",
    0,
};

static const char *const conf_no[] = {
    "n", "no", "false", "nil", "0", "off",
    0,
};

static int
_krb5_conf_boolean(const char *s)
{
    const char *const *p;

    for(p=conf_yes; *p; p++) {
	if (strcasecmp(*p,s) == 0)
	    return 1;
    }

    for(p=conf_no; *p; p++) {
	if (strcasecmp(*p,s) == 0)
	    return 0;
    }

    /* Default to "no" */
    return 0;
}

/*
 * XXX
 * End duplicated code from src/lib/krb5/krb/get_in_tkt.c
 * XXX
 */

/*
 * The following are based on krb5_libdefault_* functions in
 * src/lib/krb5/krb/get_in_tkt.c
 * N.B.  This assumes that context->default_realm has
 * already been established.
 */
krb5_error_code
pkinit_kdcdefault_strings(krb5_context context, const char *realmname,
			  const char *option, char ***ret_value)
{
    profile_t profile = NULL;
    const char *names[5];
    char **values = NULL;
    krb5_error_code retval;

    if (context == NULL)
	return KV5M_CONTEXT;

    profile = context->profile;

    if (realmname != NULL) {
	/*
	 * Try number one:
	 *
	 * [realms]
	 *	    REALM = {
	 *		option = <value>
	 *	    }
	 */

	names[0] = "realms";
	names[1] = realmname;
	names[2] = option;
	names[3] = 0;
	retval = profile_get_values(profile, names, &values);
	if (retval == 0 && values != NULL)
	    goto goodbye;
    }

    /*
     * Try number two:
     *
     * [kdcdefaults]
     *	    option = <value>
     */

    names[0] = "kdcdefaults";
    names[1] = option;
    names[2] = 0;
    retval = profile_get_values(profile, names, &values);
    if (retval == 0 && values != NULL)
	goto goodbye;

goodbye:
    if (values == NULL)
	retval = ENOENT;

    *ret_value = values;

    return retval;

}

krb5_error_code
pkinit_kdcdefault_string(krb5_context context, const char *realmname,
			 const char *option, char **ret_value)
{
    krb5_error_code retval;
    char **values = NULL;

    retval = pkinit_kdcdefault_strings(context, realmname, option, &values);
    if (retval)
	return retval;

    if (values[0] == NULL) {
	retval = ENOENT;
    } else {
	*ret_value = malloc(strlen(values[0]) + 1);
	/* Solaris Kerberos */
	if (*ret_value == NULL) {
	    pkiDebug(error_message(ENOMEM));
	    retval = ENOMEM;
	}
	else /* Solaris Kerberos */
	    (void) strlcpy(*ret_value, values[0], strlen(values[0]) + 1);
    }

    profile_free_list(values);
    return retval;
}

krb5_error_code
pkinit_kdcdefault_boolean(krb5_context context, const char *realmname,
			  const char *option, int default_value, int *ret_value)
{
    char *string = NULL;
    krb5_error_code retval;

    retval = pkinit_kdcdefault_string(context, realmname, option, &string);

    if (retval == 0) {
	*ret_value = _krb5_conf_boolean(string);
	free(string);
    } else
	*ret_value = default_value;

    return 0;
}

krb5_error_code
pkinit_kdcdefault_integer(krb5_context context, const char *realmname,
			  const char *option, int default_value, int *ret_value)
{
    char *string = NULL;
    krb5_error_code retval;

    retval = pkinit_kdcdefault_string(context, realmname, option, &string);

    if (retval == 0) {
	char *endptr;
	long l;
	l = strtol(string, &endptr, 0);
	if (endptr == string)
	    *ret_value = default_value;
	else
	    *ret_value = l;
	free(string);
    } else
	*ret_value = default_value;

    return 0;
}


/*
 * krb5_libdefault_string() is defined as static in
 * src/lib/krb5/krb/get_in_tkt.c.  Create local versions of
 * krb5_libdefault_* functions here.  We need a libdefaults_strings()
 * function which is not currently supported there anyway.  Also,
 * add the ability to supply a default value for the boolean and
 * integer functions.
 */

krb5_error_code
pkinit_libdefault_strings(krb5_context context, const krb5_data *realm,
			  const char *option, char ***ret_value)
{
    profile_t profile;
    const char *names[5];
    char **values = NULL;
    krb5_error_code retval;
    char realmstr[1024];

    if (realm != NULL && realm->length > sizeof(realmstr)-1)
	return EINVAL;

    if (realm != NULL) {
	/* Solaris Kerberos */
	(void) strlcpy(realmstr, realm->data, realm->length + 1);
	realmstr[realm->length] = '\0';
    }

    if (!context || (context->magic != KV5M_CONTEXT))
	return KV5M_CONTEXT;

    profile = context->profile;


    if (realm != NULL) {
	/*
	 * Try number one:
	 *
	 * [libdefaults]
	 *	  REALM = {
	 *		  option = <value>
	 *	  }
	 */

	names[0] = "libdefaults";
	names[1] = realmstr;
	names[2] = option;
	names[3] = 0;
	retval = profile_get_values(profile, names, &values);
	if (retval == 0 && values != NULL && values[0] != NULL)
	    goto goodbye;

	/*
	 * Try number two:
	 *
	 * [realms]
	 *	REALM = {
	 *		option = <value>
	 *	}
	 */

	names[0] = "realms";
	names[1] = realmstr;
	names[2] = option;
	names[3] = 0;
	retval = profile_get_values(profile, names, &values);
	if (retval == 0 && values != NULL && values[0] != NULL)
	    goto goodbye;
    }

    /*
     * Try number three:
     *
     * [libdefaults]
     *	      option = <value>
     */

    names[0] = "libdefaults";
    names[1] = option;
    names[2] = 0;
    retval = profile_get_values(profile, names, &values);
    if (retval == 0 && values != NULL && values[0] != NULL)
	goto goodbye;

goodbye:
    if (values == NULL)
	return ENOENT;

    *ret_value = values;

    return retval;
}

krb5_error_code
pkinit_libdefault_string(krb5_context context, const krb5_data *realm,
			 const char *option, char **ret_value)
{
    krb5_error_code retval;
    char **values = NULL;

    retval = pkinit_libdefault_strings(context, realm, option, &values);
    if (retval)
	return retval;

    if (values[0] == NULL) {
	retval = ENOENT;
    } else {
	*ret_value = malloc(strlen(values[0]) + 1);
	if (*ret_value == NULL)
	    retval = ENOMEM;
	else /* Solaris Kerberos */
	    (void) strlcpy(*ret_value, values[0], strlen(values[0]) + 1);
    }

    profile_free_list(values);
    return retval;
}

krb5_error_code
pkinit_libdefault_boolean(krb5_context context, const krb5_data *realm,
			  const char *option, int default_value,
			  int *ret_value)
{
    char *string = NULL;
    krb5_error_code retval;

    retval = pkinit_libdefault_string(context, realm, option, &string);

   if (retval == 0) {
	*ret_value = _krb5_conf_boolean(string);
	free(string);
    } else
	*ret_value = default_value;

    return 0;
}

krb5_error_code
pkinit_libdefault_integer(krb5_context context, const krb5_data *realm,
			  const char *option, int default_value,
			  int *ret_value)
{
    char *string = NULL;
    krb5_error_code retval;

    retval = pkinit_libdefault_string(context, realm, option, &string);

    if (retval == 0) {
	char *endptr;
	long l;
	l = strtol(string, &endptr, 0);
	if (endptr == string)
	    *ret_value = default_value;
	else
	    *ret_value = l;
	free(string);
    }

    return retval;
}